Fix vulnerabilities described in CVE-2013-0156

See https://groups.google.com/forum/#!topic/rubyonrails-security/61bkgvnSGTQ for a little explanation on the vulnerabilities as encountered in rails. See datamapper/extlib@b4f9817...4540e71 for the respective fixes in extlib.
merb · Jan 9, 2013 · 3110e92 · 3110e92
1 parent d708cfd
commit 3110e92
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/merb-core/Gemfile b/merb-core/Gemfile
@@ -1,6 +1,6 @@
 source "http://rubygems.org"
 
-gem 'extlib', '>= 0.9.13'
+gem 'extlib', '>= 0.9.16'
 gem 'erubis'
 gem 'rake'
 gem 'rack'

diff --git a/merb-core/merb-core.gemspec b/merb-core/merb-core.gemspec
@@ -30,7 +30,7 @@ Gem::Specification.new do |gem|
   ] & `git ls-files -z`.split("\0")
 
     # Runtime dependencies
-    gem.add_dependency 'extlib',     '>= 0.9.13'
+    gem.add_dependency 'extlib',     '>= 0.9.16'
     gem.add_dependency 'erubis',     '>= 2.6.2'
     gem.add_dependency 'rake'
     gem.add_dependency 'rack'